refac auth options